Founded in 2011, TunnelBear Inc. was acquired by the cybersecurity giant McAfee in 2018, which means that the Canada-based VPN provider now also falls under the privacy-challenged US jurisdiction.
The good thing is that John McAfee himself is not a fan of the NSA. The bad thing is that he’s also not a big fan of his own products, naming McAfee antivirus tools “the worst products on the f**king planet.”
In this TunnelBear review, I will try to answer the following questions: does it protect your privacy well enough? Can I stream Netflix and other services? Does TunnelBear VPN allow torrenting? And finally, is it worth paying for?
|Rank||#31 out of 215 providers|
|Number of locations||20+ countries|
|Number of servers||1000+|
|Safe for Torrenting||Officially not supported|
|Customer Support||No live chat|
|Logging policy||More than minimal data collection|
|Free version or trial||Yes, 500 MB/month|
TunnelBear is safe to use as long as you have nothing to hide. After all, it was the first VPN company to initiate an independent self-audit that’s been done three years in a row now.
Both premium and free TunnelBear versions have great security and privacy features. One that I liked particularly was the “Always on” option. This is a good idea that all VPNs should think about adding. You can set TunnelBear to load automatically as part of your OS startup. That way, you won’t have to rely on remembering to fire up your VPN client before surfing the web.
On second thought, you would expect a bit more from a paid VPN service.
While it’s a pity that TunnelBear is no longer an “independent VPN” after cybersecurity giant McAffe purchased it, the good news is that all security and privacy features remain intact. What’s more, TunnelBear continues running independent audits on their code, servers, website, and apps to make sure there are no vulnerabilities present.
TunnelBear uses top-notch AES-256 encryption – the same you will find in banks and the military. This cipher is so strong that it would take billions of years to crack it using brute force.
When it comes to tunneling protocols, TunnelBear uses:
The first two are an industry-standard both in terms of speed and security. IKEv2 is available on Windows and iOS only, but you cannot switch between the protocols because TunnelBear assigns one automatically.
The last one should be used in countries where internet access is restricted to avoid government-induced blocks. Just have in mind that all obfuscation protocols severely impact speed, and TunnelBear has it turned on by default.
TunnelBear has a kill switch named VigilantBear. It’s effective against leaking sensitive information in case the VPN connection drops. If that happens, VigilantBear will shut down your internet connection completely. Otherwise, your IP address and location might be exposed, increasing the risk of getting hacked or fined for torrenting.
Unfortunately, it’s not available on the iOS devices yet. Users of other platforms can toggle the kill switch on and off from the client’s Security Settings.
I recommend pairing VigilantBear with loading TunnelBear when your device starts. This way you won’t forget to turn it on before going online.
During the TunnelBear leak test, I found no DNS or WebRTC (IPv6) leaks that could reveal your identity.
TunnelBear uses its own DNS servers, giving you protection against DNS leaks. It means that your Internet Service Provider (ISP) has no idea of what sites you visit. If you want to make sure you’re not susceptible to the other leaks, turn WebRTC off on your browser. Alternatively, you can disable IPv6 for the whole connection.
I also recommend running both IP and DNS leak tests for yourself to make sure your connection is protected. You can easily find different tests by searching for “dns leak test” and “ip leak test.”
Canada is where TunnelBear VPN is based, and that’s not great because this country belongs to the Five Eyes alliance. What’s more, TunnelBear was bought by McAfee in 2018, which is under the US jurisdiction. McAfee himself is not a big fan of NSA, but both countries are known for tough anti-piracy laws and make TunnelBear subject to data retention policies.
TunnelBear used to own all their servers, but this is no longer advertised on their website. This means that a service cannot have 100% control over their user’s data being transferred or even stored.
Also, as you will see below, TunnelBear’s logs have a bit of extra information that might prove to be interesting for the authorities. If a VPN provider has truly zero logs, the governments won’t be able to find anything about you.
TunnelBear claims to operate a strict no-logs policy, stating that “at no point, and under no circumstances will TunnelBear log or sell your personal/usage data.” Yet it collects and stores some logs about your authentication time, OS version, VPN app version, monthly bandwidth usage, etc.
What’s more, purchase-related data, such as your email, plan and payment details, Twitter ID (if applicable), and the number of GBs consumed. Luckily, it doesn’t include your IP, DNS queries, or activity inside the network.
I’m not saying that all logging is evil since certain operational processes can only be maintained by having basic data about the users. But TunnelBear is clearly logging more than the needed minimum.
As per TunnelBear’s logging policy, your personal data will be provided to authorities “in the event TunnelBear is served with a valid subpoena, warrant, or another legal document.” Secondly, the VPN says that they “may send data to third-party service providers” for “understanding website analytics” – which could mean almost anything.
TunnelBear allows anonymous payment with Bitcoin, but it doesn’t fully support anonymous purchasing. That is because your email address will be your login name, thus it cannot be a throwaway account. In any case, there are still quite a few services that don’t allow anonymous payments with gift cards or cryptocurrencies, so TunnelBear VPN is doing quite a good job in this department.
TunnelBear has 1000+ servers in 20+ countries. The app lists all of the countries for you to choose from, but there’s also an Auto-connect mode, which selects the fastest server (the default option on the Windows client). Using it is okay if you’re not trying to access content available only in a particular location.
My TunnelBear speed test has found that the situation has improved significantly since our last update.
Here are my results without a VPN from a location in Europe:
TunnelBear Germany server speed results
TunnelBear United States speed results
TunnelBear Australia speed results
Despite the atrocious upload and unusually high ping in Germany and Australia, I can say that TunnelBear provides fast download speeds across the globe. Of course, the company doesn’t state how many of their servers are virtual and how many are actually out there in Australia or another country. Therefore, I’d advise taking these TunnelBear speed test results with a pinch of salt, and, most importantly, to run your own before buying.
That’s very likely because this service has apps for Windows, macOS, Android, and iOS. In addition, browser extensions for Chrome, Firefox, and Opera are available. Chrome users can also download TunnelBear Blocker, which attacks ads and tracking.
Unfortunately, there’s no support for a router or any other device, so you won’t be able to make TunnelBear your home VPN, even though it allows five simultaneous connections.
TunnelBear apps are pretty similar across the platforms, offering an easy-to-use and simple interface. Most buttons and settings have clear descriptions so that even novice computer users would know how to use TunnelBear.
TunnelBear apps for Windows and macOS are pretty similar, save for the Settings. Both versions offer similar features – switching TCP Override, VigilantBear, GhostBear, and managing Trusted Networks. All these can be toggled by pressing the cogwheel on the top left.
The more confusing setting, found General tab, is TCP Override. This option, available on the Mac and Windows apps, forces TunnelBear to only use the TCP protocol instead of UDP, which is slower but more reliable. You should choose it only if you have a good internet connection and if turning the VPN on makes your streams choppy or your download times slow.
Free version users will also be getting notifications about their bandwidth situation, with a friendly reminder to upgrade and roam the internet wilderness, free as a bird or a bear.
Those who want to connect as fast as possible can simply press the On/Off button at the top left and let the VPN select the best location. Instead of Auto-connect, you can also choose one of the 20+ countries by pressing the drop-down menu icon.
GhostBear, which is another name for Stealth VPN, should be used if you’re unable to connect without it. That would mean that your traffic is recognized as coming from a VPN and thus blocked. GhostBear can be invaluable in countries like China, Iran, or Saudi Arabia, where internet access is restricted.
The Trusted Networks tab allows you to add Wi-Fi networks which you see as safe enough to connect to without a VPN. While our advice is to always have your VPN on, there are situations when the extra speed is worth more. In any case, adding your trusted networks means that should they be unavailable, you will be connecting safely with TunnelBear VPN on.
Most importantly, both macOS and Windows apps are as secure as another. The only key difference is that the macOS version doesn’t have the IKEv2 protocol.
Downloading Android or iOS version requires you to log in to Google Play Store or App Store, respectively. Both apps look similar at first sight, but looks can be and are deceiving in this case.
Their Android app is as secure as the desktop versions, having the same encryption, protocols, and other features. In fact, it even has SplitBear – a split tunneling option that is unavailable on desktop. SplitBear allows you to choose which apps will use a VPN connection. Therefore, you can torrent safely while browsing freely at full speed.
Unfortunately, TunnelBear for iOS is a total lackluster. The only two things you can do is add Trusted Networks and toggle Bear Sounds.
Without a kill switch (VigilantBear), your IP address will be exposed in case of a VPN failure, and TunnelBear is prone to that. Also, without a stealth protocol (GhostBear), you most likely won’t be able to browse freely in China and other countries where internet access is restricted.
TunnelBear offers three browser extensions and TunnelBear Blocker. The latter stops ads and tracking attempts, including email pixels, fingerprinting, and ultrasonic tracking. However, it’s available on TunnelBear for Chrome only. Furthermore, the last time that TunnelBear updated the Blocker was back in 2018.
The situation with TunnelBear browser extensions is not much better. I was disappointed to find that the Chrome TunnelBear version was last updated in October 2019. Sadly, this looks pretty good, considering that the Opera version dates back to January 2019. Only the Firefox extension saw an update a few months ago.
Learning how to use TunnelBear browser extensions is easy. The main window lets you do five things:
When the VPN is on, you will see a bear climb out of the tunnel, and a straight line drawn from your location to your destination. Contrary to real life, as long as you can see a bear, you’re safe.
Unfortunately, there are virtually no settings to tweak or features to turn on save for some keyboard shortcuts. What is more, there’s no Auto option for selecting the fastest server, which might be in another country the next time you need to use a proxy.
But the most concerning thing is the list of dubious permissions that TunnelBear extensions require. Reading and changing all your data on the websites you visit and managing your extensions are only just a few of them.
When it comes to Netflix, TunnelBear is a bad choice. This VPN doesn’t unblock any libraries, be it the US, the UK, or the Australian. If it did, though, users even from distant locations would probably have enough connection speed to stream smoothly in HD or even 4K. At least that’s what I got from Fast.com tests.
Users of the TunnelBear’s free account probably know that 500 MB per month won’t get them too far if you want to watch Netflix. Unfortunately, the Paid version won’t get you much further either – TunnelBear and Netflix simply don’t get along.
When it comes to other streaming platforms, it would be surprising to see TunnelBear unblock BBC iPlayer, Hulu, or Amazon Prime in the near future.
To sum up, I recommend choosing one of our best-ranked streaming VPNs if you want to watch all your favorite movies and TV shows.
TunnelBear is friendly for Kodi. It offers great encryption, protects your IP, and is easy to install and use. The best part is that speeds shouldn’t be of an issue, but you should still test with the free TunnelBear version first.
As for those who want to use Kodi to see what they shouldn’t see, they should consider a VPN in a friendlier jurisdiction than Canada.
No, TunnelBear doesn’t support torrenting, and you shouldn’t use this VPN for P2P. While that doesn’t mean that torrenting won’t work for everyone, don’t expect any help on this matter from the provider – they offer no explanation on their decision.
When it comes to torrenting policies, I don’t recommend using TunnelBear. Canada’s laws require all ISPs and VPNs to log identifiable user info, and its website has zero information about P2P. So, either TunnelBear is lying to the government about keeping such logs, or it’s lying to you about not keeping them.
I suggest you look for a more torrent-friendly VPN if you don’t see your future without P2P action.
TunnelBear has no live chat support. Hopefully, this VPN will reconsider and provide their 20+ million users with proper and fast live support.
In the meantime, the Help page on its website gives you three options:
The response to your support ticket usually takes from a few to 24 hours. The TunnelBear support must have gone through some improvements because you can still find older comments with users complaining about slow and useless support.
These are the pricing plans TunnelBear offers for this year’s Black Friday:
TunnelBear accepts credit cards and Bitcoins. There used to be a PayPal option, and I hope it will return someday, like a Jedi.
One negative touch about the pricing is that TunnelBear doesn’t have a money-back guarantee. Nevertheless, you can always try it for free and see if you get what you want. But to be honest, while these prices don’t look high, you can get better VPNs for the same money that unblock Netflix and support P2P.
It’s a big bonus that you can try and use TunnelBear’s free version on Windows, macOS, iOS, and Android. It’s as secure as the premium one, but you won’t be able to choose a tunneling protocol. This service allows you 500 MB free monthly traffic, but you can extend it with an extra 1 GB by tweeting about the VPN on Twitter.
The TunnelBear free VPN offers 20+ locations to connect to. This seems like a rather small network, no doubt. However, our most recent speed tests show improved performance. In fact, we were impressed to see such speeds with the free VPN.
For general users and travelers, these could be acceptable conditions if the only aim is to access geo-restricted web content or stream some smaller videos. But the political activists, hackers, or torrent users who need unlimited bandwidth and a higher level of security, will find the free TunnelBear version useless.
No, you shouldn’t buy this VPN. TunnelBear may be good for casual users that aren’t into streaming and torrenting, but others can easily find a better option at the same price.
Power users will miss customization options, especially for the iOS app and browser extensions, that have virtually none of them.
The free TunnelBear version provides you with the same level of security and privacy, although you’re severely limited by bandwidth. And because of that, there’s not much point in using it at all unless for a trial.